Privacy notice

Effective 21 October 2026 · Version 1.0

Northframe s.r.o.
Dejvická 189/7, Dejvice, 160 00 Praha 6, Czech Republic
Company ID: 24603830 · Registered with the Municipal Court in Prague, file C 443855
Contact: mail@northframe.cz

1. Who handles your data

Northframe s.r.o. operates Kinuvi and is the controller for account registration, authentication, service security, support and website enquiries. Your trainer decides why and how coaching records are used and is the controller for those records; Northframe processes them to provide the service on the trainer’s instructions. Contact your trainer about their coaching decisions, and contact us about the platform or your rights.

2. What we collect and why

• Account details: your name, verified email, language, time zone, adult confirmation and records of terms acceptance. We use these to provide and administer your account under our agreement with you.
• Coaching records: trainer–client links, invitations, goals, experience, availability, equipment, workout prescriptions, actual sets, activity logs, messages, feedback and uploaded files. These support the coaching relationship.
• Optional health information: limitations or health details you choose to share may be sensitive personal data. The intake asks for separate explicit consent before you share this information. Share only what is necessary for your training. You can withdraw consent by contacting your trainer or us and request removal without affecting earlier lawful processing.
• Security and operation: authentication events, IP addresses and technical request information processed by our hosting providers, delivery status, resource identifiers and audit events. We use these for our legitimate interest in securing and operating the service, preventing misuse and resolving failures.
• Support and rights requests: the information you provide so we can respond, fulfil legal duties and resolve your request. We may ask for proportionate identity verification.

When a trainer creates a profile or invites you, your name and email come from that trainer. The first invitation contains no coaching or health records. An email address alone does not grant access to a client profile.

3. Who can access it

Your linked trainer and you can access the coaching information shared in your relationship. Trainer-only notes and unpublished drafts are not included in the client interface. Other trainers and clients cannot access your records. Support personnel have no routine coaching access; operational intervention is limited to what is necessary to resolve an authorised request or security incident.

We use Supabase for authentication, database and private file storage, Vercel for hosting and application processing, and Resend for transactional email. The primary Supabase database is in Ireland. These providers may process technical or support data in other locations under their applicable data protection terms and transfer safeguards. We do not sell personal data or use coaching records for advertising.

Early-access mailing list

If you request early access, we store your email, language and consent timestamps privately in Supabase. We send a confirmation email first. Only after you confirm do we send access invitations and occasional product updates, based on your consent. You can withdraw consent using the unsubscribe link in that email or contact us. This does not create an app account. Confirmation links expire after 24 hours; unconfirmed requests are removed after 7 days. Unsubscribed records are removed after 30 days. Hashed network identifiers are kept for approximately one day to limit abusive requests. Resend processes these emails.

4. Email and device storage

We send account codes, invitations and service notifications. Coaching notifications link to the protected app; they do not include the report or video itself. Replies to a verified conversation address may enter that conversation. Unverified replies are held for review. Delivery status does not mean a message was read. You can turn workout reminders off in your account; account and security messages are necessary to provide access.

We use essential session cookies and local preferences. Workout drafts may be stored on your device to survive a connection failure and then synchronised with your account. Drafts are cleared when you sign out or switch accounts and are only offered for recovery for 24 hours. Sign out on shared devices. The application does not use advertising cookies.

5. Retention and deletion

Account and coaching records remain while needed for your account and coaching relationship. Pausing or archiving a client does not itself delete their history. You or your trainer can request deletion when records are no longer needed. An account deletion request immediately blocks account access and queues removal of its records and files; we aim to complete removal from active systems within 30 days, subject to a specific legal duty or necessary legal claim. We will explain any justified exception.

Expired invitations cannot be accepted. Operational authentication counters are cleared after their security purpose ends. Provider logs and backup copies follow the providers’ retention settings and are not used as live coaching records. When restoring a backup, we must reapply completed deletion requests before reopening access.

6. Your choices and rights

You can request access, correction, deletion, restriction and, where applicable, portability of your data. You can object to processing based on legitimate interests and withdraw consent at any time. An account export is available in Settings and includes accessible records and files. People who have not yet accepted an invitation can also contact us to exercise their rights. We normally respond within one month, and will explain any lawful extension.

Write to mail@northframe.cz. You may complain to the Czech Office for Personal Data Protection or the supervisory authority where you live or work. We do not make decisions with legal or similarly significant effects using solely automated processing. Progression suggestions require a trainer’s review and explicit publication.

7. Changes

We will update this notice when the service or processing changes. We will notify account holders of material changes through the service or email and display the current version here.